I really want to like NPM...but it's been a headache! (Updated - it was my firewalling not NPM)

[cb3inco]

Hi everyone,
I really want to like NPM, but I'm facing challenges that I don't understand. Things with NPM works great until I reboot my host - which will need to be done from time to time to install OS updates.

After I reboot, all my containers included NPM are inaccessible. I get 522 errors from Cloudflare. I can't seem to determine what is actually causing the problem other than the fact that there might be some conflict with other containers running on port 80.

My NPM docker config is as follows:

services:
  app:
    image: 'jc21/nginx-proxy-manager:2.12.3'
    container_name: npm
    restart: unless-stopped
    ports:
      # These ports are in format <host-port>:<container-port>
      - '80:80' # Public HTTP Port
      - '443:443' # Public HTTPS Port
      - '81:81' # Admin Web Port
      # Add any other Stream port you want to expose
      # - '21:21' # FTP

    #environment:
      # Uncomment this if you want to change the location of
      # the SQLite DB file within the container
      # DB_SQLITE_FILE: "/data/database.sqlite"

      # Uncomment this if IPv6 is not enabled on your host
      # DISABLE_IPV6: 'true'

    volumes:
      - ./data:/data
      - ./letsencrypt:/etc/letsencrypt
    networks:
      - npm

networks:
  npm:
    name: npm
    driver: bridge

For example, I'm running webdav an that compose file looks like this:

services:
  webdav-server:
    image: loganmarchione/docker-webdav-nginx:latest
    container_name: webdav-server
    restart: unless-stopped
    volumes:
      - ./webdav:/var/www/webdav
    networks:
      - npm
    environment:
      - WEBDAV_USERS=user:password
      - NGINX_CLIENT_MAX_BODY_SIZE=500M
    labels:
      - "diun.enable=true"
networks:
  npm:
    external: true
    name: npm

This webdav server is running on port 80.

However, I've removed this container and another container (Wallabag) that was running on port 80 also and NPM would continue to fail and not proxy traffic to other services.

I'm running NPM version 2.12.3. I'm about to rip it out and use something else because it's becoming frustrating. I wanted to use this for work production stuff, but this is a major no go. I can't have this.

What am I doing wrong?

Other notes:

• Server is running on Hetzner
• I'm using something similar to this https://github.com/chaifeng/ufw-docker to manage my firewall
• Everything is sitting behind cloudflare and using DNS challenge to get TLS certs.
• NPM management is being proxied with npm.domain.com to npm:81

Edit:

Interestingly - if I run curl localhost:80 on the host, I do get the HTML output of the NPM login page. Perhaps it's something with my Firewall rules.

[cb3inco]

Disabled the iptables/ufw stuff I enabled and did two reboots, things came back up without issue. Stupid AI. I will try implementing this -https://github.com/chaifeng/ufw-docker - and see if I run into the same problem. But appears the host was blocking traffic on reboot. I'll keep testing.

[cb3inco]

Turns out it appears to be my firewalling as I'm using UFW with Docker and the setup I was using broke things. I think I got it working.

Was using a AI service help me provide some things regarding to host security and it didn't quite make it. The link in the previous comment seems to be what I really wanted. So far it's working on reboots. Sorry for the panic.